https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T19:41:45.729514+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-07T19:41:45.733355+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-253379 EUVD-2026-253379 2026-10-07T19:41:45.733443+00:00 EUVD-2026-253379 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43779 fkie_cve-2025-43779 2026-10-07T19:41:45.733466+00:00

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code via _com_liferay_commerce_product_definitions_web_internal_portlet_CPDefinitionsPortlet_productTypeName parameter. This malicious payload is then reflected and executed within the user's browser.

 https://cve.radiocsirt.org/vuln/ghsa-687m-mwvq-fx42 GHSA-687m-mwvq-fx42 2026-10-07T19:41:45.733509+00:00

A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2024.Q1.1 through 2024.Q1.18 and 7.4 GA through update 92 allows a remote authenticated attacker to inject JavaScript code via _com_liferay_commerce_product_definitions_web_internal_portlet_CPDefinitionsPortlet_productTypeName parameter. This malicious payload is then reflected and executed within the user's browser.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2118 WID-SEC-W-2025-2118 — Liferay Portal: Mehrere Schwachstellen 2026-10-07T19:41:45.733543+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Cross Site Scripting durchzuführen und Benutzerrechte erlangen.